Abstract 


In a system configured with control redundancy, there are two control elements: an 
active control complex and an inactive control complex. An increased level of fault 
tolerance can be achieved when switching the activity state between complexes in 
the event of a critical software or hardware failure. The present invention relates to 
system redundancy and introduces a new method to ensure that system context is 
always synchronized across a switch-over process. 


